File accesfile access auditing.pdf

8/14/2019 File accesfile access auditing.pdf

1/8

File access auditing......without the pain

PA File Sight 4.

PA File Sight will help you dete

tell you when a new file or folde

PA File Sight can tell you who d

perform the action.

Besides file access auditing and

historical reports to help see wha

AND it lets you alert on user usa

detect file copying activity.

File access auditing...without the p

1

rmine who is reading from and writing to impo

r is created or renamed. And, when a file or fol

id it. Plus, you can often find out what program

ogging actions, the Ultra Edition helps you furt

t happened the earlier, whether you chose to be

ge patterns (reading X files in Y time for exam

... ain

tant files. It can

er gets deleted,

was used to

her by providing

notified or not.

le) to help


2/8

File Auditing Features

Monitor:

All files or just a subset

File and folder creation, deletion, access (reads), changes (writes)

File and folder permission changes

Successful actions and well as failures

Real-time monitoring that does not require enabling system audit events

Alert Details:

Date and time of action

Target file and folder

User account, including domain Activity that was done to the file

Notification Responses:

Email message

SMS text message

SNPP pager, etc.


3/8

Record to a log file

Run a program

Write to a database for later reports (Ultra only)

Reports in text, HTML, .CSV or PDF formats

Remote Monitoring

Remote Monitoring

Monitoring remote servers, even across the firewalls and the Internet

SNAP Tunnels

Safely send data to remote networks using SNAP Tunnels

Remote Support

Securely connect to monitored servers with Remote Desktop even through firewalls and across

the Internet with PA File Sight

Monitors

File Sight Monitor

The File Sight monitor watches real time file access by users and programs. You can configure

which files it watches, and how you are notified when a particular operation (file read, write,

delete, etc) occurs.

The Ultra version also lets you:

* Record the file access operations to a database for reporting (by user, by file, by operation,

etc)

* Alert on user usage patterns (ie user reads X amount of data in Y time

NOTE: This monitor can ONLY monitor drives on the local computer. Watching files on

remote computers requires that the PA File Sight service (or a Satellite) be installed on the

remote computers.

Call URL

This action will call a URL you specify, optionally posting information about the current alert.

This makes it easy to connect to a helpdesk/ticketing system.


4/8

Dial-Up Connection

Connects or disconnects a Windows Dial-up Connection. Typically this is for servers that are

not on the Internet, but need to connect to send alerts.

E-mail Alert

Sends SMTP email messages to mail boxes, cell phones, mobile devices, etc. The E-mail action

hasAlert Digests which are a powerful/friendly feature that combines multiple alerts that

happen within a short time into a single email notification. This can be very helpful when

something goes really wrong. You can easily specify when messages should be sent or

suppressed.

Execute Script

Similar to the Execute Script monitor, this Action lets you extend the list of available actions viayour own script written in VBScript. Many variables from the source monitor are also available

for creating rich, situation-specific responses.

Message Box

A simple message box that displays monitor findings. These message boxes are smart: if there

are many pending alerts you can easily dismiss them all at once.

Monitor-Directed Email

The monitor which detects a problem specifies the email address to use for each alert. This isvery useful when sending reminders and alerts to end users such as with the User Quota Monitor

and the Directory Quota Monitor.

Network Message (Net Send)

Sends a message box containing the critical monitor details to every place that you are logged

in.

Pager Alert via SNPP

Send monitor results to pagers via standard Simple Network Paging Protocol (SNPP). You caneasily specify when messages should be sent or suppressed, and the content of the message.

Phone Dialer (DTMF/SMS)

Dials a modem/phone and optionally sends DTMF commands or other commands (to send SMS

messages for example). This is typically used by a disconnected server to send an alert over a

normal phone line (where the CallerID identifies the server)


5/8

Play Sound

Audible alert when monitors detect a problem with the server.

Reboot Server

Reboots the server if a monitor has detected a critical system failure.

SMS Text Message

Send SMS text messages to your mobile device via your service providers SMS Internet

gateway (SMPP server). You can control which information gets sent, as well as when messages

are allowed.

SNMP Trap

Sends an SNMP Trap with details from the monitor firing the action

Start Application

Starts a specified application when the monitor triggers actions

Start Service

Sends control messages to the Windows Service Control Manager to start, stop or restart a

specified service.

Syslog

Sends monitor alerts to a Syslog server on the network

Write to Event Log

Writes monitor details to the Windows Event Log.

Write to Log File

Log the findings of any triggered monitor to a file. Separate files can be created for each day,week, month, etc.


6/8

Reporting Features

HTTP accessible reports

Reports are generated in HTML and accessible from within the PA File Sight Console

application, or from a web browser

Password Protection

Password protect web reports in PA File Sight

Server Status

Easily see at a glance the state of your server along with system statistics

Group Summary

See a one line status indicator per server to see at a glance how the servers in your data center

are doing. Per-group status reports are also supported.All Errors Report

The All Errors report show all recent errors on all monitors on all servers/devices within a

group. This is a good place to quickly get a detailed view of any problems happening on the

network.

All Servers Report

This report shows all of your servers in a group in a single page. Each server is a small box that

is color coded according to the status of the monitors on that server.

Visual Status Map

See a graphical map that contains status indicators that show you at a glance how servers in

different geographic regions are doing.

Satellite Status

Quickly see the current status of an individual Satellite Monitoring Service.

Satellite Summaries

Two reports that let you see the status of all of the Satellites at once.

Ad Hoc Reports

Generate reports on the fly to quickly see graphical trends

Scheduled Reports

You can create scheduled reports which will get created when you want them, and optionally

email the report to a list of recipients. Scheduled report URLs are stable so you can add them to

your Favorites list to quickly and easily see the latest results.

Group Settings


7/8

Group summary reports can be specified and controlled in a per-group way. In addition, group

reports can be automatically emailed to anyone that needs to keep track of the servers.

System Activity Log

Quickly see which monitors are running, how long they are taking, which actions are being firedand more.

Other Features

Automated Maintenance Schedule

While a computer is in maintenance mode, PA File Sight won't run monitors. It will turn itself

back on automatically after the maintenance window expires if you manually entered

maintenance mode, or it can automatically enter and leave maintenance mode on a schedule.

Bulk Configuration

Perform changes of settings in actions, monitors, reports and scheduling for several servers at

one time, or copy configuration settings to other servers.Configuration Security

Password protect the PA File Sight Console, and alert on changes that could affect monitoring.

Database Options

Easily point PA File Sight at the embedded SQLite database or use an external Microsoft SQL

Server.

Easy Deploy

Paste a list of servers or IP address from the local network into a list and let PA File Sight

silently deploy the Satellite Monitoring Service to those machines for you.

Easy to Use and Configure

"...hands down the most straight-forward, uncluttered and effective monitoring tool I have used"

-A satisfied customer

Embedded HTTP Server

Control the HTTP port that PA File Sight uses, and optionally enable HTTPS (SSL)

Error Auditing

Keep track of which errors have been reviewed and acknowledged. Also a great way foradministrators to have an overview of any errors within their area of responsibility.

External API

Send basic configuration requests to the product via an HTTPS URL.

Runs as a service

PA File Sight is composed of a console that you interact with, and a system service that is


8/8

started when the computer boots up and is always running in the background.

Server Grouping

Group servers together in visual groups to help keep track of them. Group-based status reports

are also available.

Simple Branding

Easily brand PA File Sight to have your name and graphics by simply dropping a couple of files

into the installation directory. See Branding

Simple Installation

Takes less than 3 minutes to install and get a default installation customized for your system.

5 4 2012

XJAYANTA SEN

Manager Business Administratio

Documents

File accesfile access auditing.pdf